HKCU\Software\Microsoft\Windows\CurrentVersion\Authentication\LogonUI\Notifications\* [*] HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\AppContract\* [*] HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\SharingMRU\* [*] HKCU\Software\Microsoft\Windows\CurrentVersion\ImmersiveShell\Switcher\* [*] %CSIDL_LOCAL_APPDATA%\Microsoft\Windows\WinX\* [*]